{"action":"created","comment":{"url":"https://api.github.com/repos/jetstack-experimental/cert-manager/pulls/comments/145944346","pull_request_review_id":70819999,"id":145944346,"diff_hunk":"@@ -0,0 +1,94 @@\n+# Issuing an ACME certificate using DNS validation\n+\n+`cert-manager` can be used to obtain certificates from a CA using the [ACME][1] protocol. The ACME protocol supports various challenges which are used to prove ownership of a domain so that a valid certificate can be issued for that domain. One such challenge is `dns-01`. With the DNS challenge, you prove you own a domain by proving you control domain's DNS records. You do this by creating a TXT record with specific content.\n+\n+The following `Issuer` defines the necessary information to enable DNS validation. You can read more about the `Issuer` resource [here][2].\n+\n+```yaml\n+apiVersion: certmanager.k8s.io/v1alpha1\n+kind: Issuer\n+metadata:\n+  name: letsencrypt-staging\n+  namespace: default\n+spec:\n+  acme:\n+    # The ACME server URL\n+    server: https://acme-staging.api.letsencrypt.org/directory\n+    # Email address used for ACME registration\n+    email: user@example.com\n+    # Name of a secret used to store the ACME account private key\n+    privateKeySecretRef:\n+      name: letsencrypt-staging\n+    # ACME dns-01 provider configurations\n+    dns01:\n+      # Here we define a list of DNS-01 providers that can solve DNS challenges\n+      providers:\n+      - name: prod-dns\n+        clouddns:\n+          # A secretKeyRef to a google cloud json service account\n+          serviceAccountSecretRef:\n+            name: clouddns-service-account\n+            key: service-account.json\n+          # The project in which to update the DNS zone\n+          project: gcloud-prod-project\n+      - name: cf-dns\n+        cloudflare:\n+          email: user@example.com\n+          # A secretKeyRef to a cloudflare api key\n+          apiKeySecretRef:\n+            name: cloudflare-api-key\n+            key: api-key.txt\n+```\n+\n+We have specified the ACME server URL for Let's Encrypt's [staging environment][3]. The staging environment will not issue trusted certificates but is used to ensure that the verification process is working properly before moving to production. Let's Encrypt's production environment imposes much stricter [rate limits][4], so to reduce the chance of you hitting those limits it is highly recommended to start by using the staging environment. To move to production, simply change the URL to `https://acme-v01.api.letsencrypt.org/directory`.\n+\n+The first stage of ACME is for the client to register with the ACME server. This phase includes generating an asymmetric key pair which is then associated with the email address specified in the `Issuer`. Depending on the CA, this could be used to send expiry notices when your certificates are coming up for renewal. The generated private key is stored in a `Secret` called `letsencrypt-staging`.","path":"docs/user-guides/acme-dns-validation.md","position":45,"original_position":45,"commit_id":"3c62b96c0dc1199354c2f66f24a4150647321303","original_commit_id":"353aa2244f43be4795e760a5eb9e59c0396a027e","user":{"login":"munnerz","id":203583,"avatar_url":"https://avatars3.githubusercontent.com/u/203583?v=4","gravatar_id":"","url":"https://api.github.com/users/munnerz","html_url":"https://github.com/munnerz","followers_url":"https://api.github.com/users/munnerz/followers","following_url":"https://api.github.com/users/munnerz/following{/other_user}","gists_url":"https://api.github.com/users/munnerz/gists{/gist_id}","starred_url":"https://api.github.com/users/munnerz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/munnerz/subscriptions","organizations_url":"https://api.github.com/users/munnerz/orgs","repos_url":"https://api.github.com/users/munnerz/repos","events_url":"https://api.github.com/users/munnerz/events{/privacy}","received_events_url":"https://api.github.com/users/munnerz/received_events","type":"User","site_admin":false},"body":"Cool - I guess the private key contains a public component, which is registered along with your email at the CA. Just want to make sure we get our terminology correct 😄 SGTM","created_at":"2017-10-20T11:59:24Z","updated_at":"2017-10-20T11:59:24Z","html_url":"https://github.com/jetstack-experimental/cert-manager/pull/131#discussion_r145944346","pull_request_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/pulls/131","author_association":"OWNER","_links":{"self":{"href":"https://api.github.com/repos/jetstack-experimental/cert-manager/pulls/comments/145944346"},"html":{"href":"https://github.com/jetstack-experimental/cert-manager/pull/131#discussion_r145944346"},"pull_request":{"href":"https://api.github.com/repos/jetstack-experimental/cert-manager/pulls/131"}},"in_reply_to_id":145932232},"pull_request":{"url":"https://api.github.com/repos/jetstack-experimental/cert-manager/pulls/131","id":146887484,"html_url":"https://github.com/jetstack-experimental/cert-manager/pull/131","diff_url":"https://github.com/jetstack-experimental/cert-manager/pull/131.diff","patch_url":"https://github.com/jetstack-experimental/cert-manager/pull/131.patch","issue_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/issues/131","number":131,"state":"open","locked":false,"title":"Create use-case focused tutorials","user":{"login":"dippynark","id":28210877,"avatar_url":"https://avatars3.githubusercontent.com/u/28210877?v=4","gravatar_id":"","url":"https://api.github.com/users/dippynark","html_url":"https://github.com/dippynark","followers_url":"https://api.github.com/users/dippynark/followers","following_url":"https://api.github.com/users/dippynark/following{/other_user}","gists_url":"https://api.github.com/users/dippynark/gists{/gist_id}","starred_url":"https://api.github.com/users/dippynark/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dippynark/subscriptions","organizations_url":"https://api.github.com/users/dippynark/orgs","repos_url":"https://api.github.com/users/dippynark/repos","events_url":"https://api.github.com/users/dippynark/events{/privacy}","received_events_url":"https://api.github.com/users/dippynark/received_events","type":"User","site_admin":false},"body":"","created_at":"2017-10-16T21:00:26Z","updated_at":"2017-10-20T11:59:24Z","closed_at":null,"merged_at":null,"merge_commit_sha":"62dcf050cfe6aa5bdbe4d7cd55a2f3b20f7847e1","assignee":null,"assignees":[],"requested_reviewers":[],"milestone":null,"commits_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/pulls/131/commits","review_comments_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/pulls/131/comments","review_comment_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/pulls/comments{/number}","comments_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/issues/131/comments","statuses_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/statuses/3c62b96c0dc1199354c2f66f24a4150647321303","head":{"label":"dippynark:create-use-case-focused-tutorials","ref":"create-use-case-focused-tutorials","sha":"3c62b96c0dc1199354c2f66f24a4150647321303","user":{"login":"dippynark","id":28210877,"avatar_url":"https://avatars3.githubusercontent.com/u/28210877?v=4","gravatar_id":"","url":"https://api.github.com/users/dippynark","html_url":"https://github.com/dippynark","followers_url":"https://api.github.com/users/dippynark/followers","following_url":"https://api.github.com/users/dippynark/following{/other_user}","gists_url":"https://api.github.com/users/dippynark/gists{/gist_id}","starred_url":"https://api.github.com/users/dippynark/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dippynark/subscriptions","organizations_url":"https://api.github.com/users/dippynark/orgs","repos_url":"https://api.github.com/users/dippynark/repos","events_url":"https://api.github.com/users/dippynark/events{/privacy}","received_events_url":"https://api.github.com/users/dippynark/received_events","type":"User","site_admin":false},"repo":{"id":102971535,"name":"cert-manager","full_name":"dippynark/cert-manager","owner":{"login":"dippynark","id":28210877,"avatar_url":"https://avatars3.githubusercontent.com/u/28210877?v=4","gravatar_id":"","url":"https://api.github.com/users/dippynark","html_url":"https://github.com/dippynark","followers_url":"https://api.github.com/users/dippynark/followers","following_url":"https://api.github.com/users/dippynark/following{/other_user}","gists_url":"https://api.github.com/users/dippynark/gists{/gist_id}","starred_url":"https://api.github.com/users/dippynark/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dippynark/subscriptions","organizations_url":"https://api.github.com/users/dippynark/orgs","repos_url":"https://api.github.com/users/dippynark/repos","events_url":"https://api.github.com/users/dippynark/events{/privacy}","received_events_url":"https://api.github.com/users/dippynark/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/dippynark/cert-manager","description":"Automatically provision TLS certificates for Kubernetes","fork":true,"url":"https://api.github.com/repos/dippynark/cert-manager","forks_url":"https://api.github.com/repos/dippynark/cert-manager/forks","keys_url":"https://api.github.com/repos/dippynark/cert-manager/keys{/key_id}","collaborators_url":"https://api.github.com/repos/dippynark/cert-manager/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/dippynark/cert-manager/teams","hooks_url":"https://api.github.com/repos/dippynark/cert-manager/hooks","issue_events_url":"https://api.github.com/repos/dippynark/cert-manager/issues/events{/number}","events_url":"https://api.github.com/repos/dippynark/cert-manager/events","assignees_url":"https://api.github.com/repos/dippynark/cert-manager/assignees{/user}","branches_url":"https://api.github.com/repos/dippynark/cert-manager/branches{/branch}","tags_url":"https://api.github.com/repos/dippynark/cert-manager/tags","blobs_url":"https://api.github.com/repos/dippynark/cert-manager/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/dippynark/cert-manager/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/dippynark/cert-manager/git/refs{/sha}","trees_url":"https://api.github.com/repos/dippynark/cert-manager/git/trees{/sha}","statuses_url":"https://api.github.com/repos/dippynark/cert-manager/statuses/{sha}","languages_url":"https://api.github.com/repos/dippynark/cert-manager/languages","stargazers_url":"https://api.github.com/repos/dippynark/cert-manager/stargazers","contributors_url":"https://api.github.com/repos/dippynark/cert-manager/contributors","subscribers_url":"https://api.github.com/repos/dippynark/cert-manager/subscribers","subscription_url":"https://api.github.com/repos/dippynark/cert-manager/subscription","commits_url":"https://api.github.com/repos/dippynark/cert-manager/commits{/sha}","git_commits_url":"https://api.github.com/repos/dippynark/cert-manager/git/commits{/sha}","comments_url":"https://api.github.com/repos/dippynark/cert-manager/comments{/number}","issue_comment_url":"https://api.github.com/repos/dippynark/cert-manager/issues/comments{/number}","contents_url":"https://api.github.com/repos/dippynark/cert-manager/contents/{+path}","compare_url":"https://api.github.com/repos/dippynark/cert-manager/compare/{base}...{head}","merges_url":"https://api.github.com/repos/dippynark/cert-manager/merges","archive_url":"https://api.github.com/repos/dippynark/cert-manager/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/dippynark/cert-manager/downloads","issues_url":"https://api.github.com/repos/dippynark/cert-manager/issues{/number}","pulls_url":"https://api.github.com/repos/dippynark/cert-manager/pulls{/number}","milestones_url":"https://api.github.com/repos/dippynark/cert-manager/milestones{/number}","notifications_url":"https://api.github.com/repos/dippynark/cert-manager/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/dippynark/cert-manager/labels{/name}","releases_url":"https://api.github.com/repos/dippynark/cert-manager/releases{/id}","deployments_url":"https://api.github.com/repos/dippynark/cert-manager/deployments","created_at":"2017-09-09T17:09:03Z","updated_at":"2017-09-09T17:09:05Z","pushed_at":"2017-10-20T10:55:41Z","git_url":"git://github.com/dippynark/cert-manager.git","ssh_url":"git@github.com:dippynark/cert-manager.git","clone_url":"https://github.com/dippynark/cert-manager.git","svn_url":"https://github.com/dippynark/cert-manager","homepage":"","size":32125,"stargazers_count":0,"watchers_count":0,"language":"Go","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"jetstack-experimental:master","ref":"master","sha":"d97687f6be7260d755bb547a14db3cd2c9c25992","user":{"login":"jetstack-experimental","id":22496943,"avatar_url":"https://avatars1.githubusercontent.com/u/22496943?v=4","gravatar_id":"","url":"https://api.github.com/users/jetstack-experimental","html_url":"https://github.com/jetstack-experimental","followers_url":"https://api.github.com/users/jetstack-experimental/followers","following_url":"https://api.github.com/users/jetstack-experimental/following{/other_user}","gists_url":"https://api.github.com/users/jetstack-experimental/gists{/gist_id}","starred_url":"https://api.github.com/users/jetstack-experimental/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jetstack-experimental/subscriptions","organizations_url":"https://api.github.com/users/jetstack-experimental/orgs","repos_url":"https://api.github.com/users/jetstack-experimental/repos","events_url":"https://api.github.com/users/jetstack-experimental/events{/privacy}","received_events_url":"https://api.github.com/users/jetstack-experimental/received_events","type":"Organization","site_admin":false},"repo":{"id":92313258,"name":"cert-manager","full_name":"jetstack-experimental/cert-manager","owner":{"login":"jetstack-experimental","id":22496943,"avatar_url":"https://avatars1.githubusercontent.com/u/22496943?v=4","gravatar_id":"","url":"https://api.github.com/users/jetstack-experimental","html_url":"https://github.com/jetstack-experimental","followers_url":"https://api.github.com/users/jetstack-experimental/followers","following_url":"https://api.github.com/users/jetstack-experimental/following{/other_user}","gists_url":"https://api.github.com/users/jetstack-experimental/gists{/gist_id}","starred_url":"https://api.github.com/users/jetstack-experimental/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jetstack-experimental/subscriptions","organizations_url":"https://api.github.com/users/jetstack-experimental/orgs","repos_url":"https://api.github.com/users/jetstack-experimental/repos","events_url":"https://api.github.com/users/jetstack-experimental/events{/privacy}","received_events_url":"https://api.github.com/users/jetstack-experimental/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/jetstack-experimental/cert-manager","description":"Automatically provision TLS certificates for Kubernetes","fork":false,"url":"https://api.github.com/repos/jetstack-experimental/cert-manager","forks_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/forks","keys_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/keys{/key_id}","collaborators_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/teams","hooks_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/hooks","issue_events_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/issues/events{/number}","events_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/events","assignees_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/assignees{/user}","branches_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/branches{/branch}","tags_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/tags","blobs_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/git/refs{/sha}","trees_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/git/trees{/sha}","statuses_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/statuses/{sha}","languages_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/languages","stargazers_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/stargazers","contributors_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/contributors","subscribers_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/subscribers","subscription_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/subscription","commits_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/commits{/sha}","git_commits_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/git/commits{/sha}","comments_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/comments{/number}","issue_comment_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/issues/comments{/number}","contents_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/contents/{+path}","compare_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/compare/{base}...{head}","merges_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/merges","archive_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/downloads","issues_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/issues{/number}","pulls_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/pulls{/number}","milestones_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/milestones{/number}","notifications_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/labels{/name}","releases_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/releases{/id}","deployments_url":"https://api.github.com/repos/jetstack-experimental/cert-manager/deployments","created_at":"2017-05-24T16:25:59Z","updated_at":"2017-10-20T06:18:34Z","pushed_at":"2017-10-20T10:55:42Z","git_url":"git://github.com/jetstack-experimental/cert-manager.git","ssh_url":"git@github.com:jetstack-experimental/cert-manager.git","clone_url":"https://github.com/jetstack-experimental/cert-manager.git","svn_url":"https://github.com/jetstack-experimental/cert-manager","homepage":"","size":32140,"stargazers_count":110,"watchers_count":110,"language":"Go","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":11,"mirror_url":null,"open_issues_count":37,"forks":11,"open_issues":37,"watchers":110,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/jetstack-experimental/cert-manager/pulls/131"},"html":{"href":"https://github.com/jetstack-experimental/cert-manager/pull/131"},"issue":{"href":"https://api.github.com/repos/jetstack-experimental/cert-manager/issues/131"},"comments":{"href":"https://api.github.com/repos/jetstack-experimental/cert-manager/issues/131/comments"},"review_comments":{"href":"https://api.github.com/repos/jetstack-experimental/cert-manager/pulls/131/comments"},"review_comment":{"href":"https://api.github.com/repos/jetstack-experimental/cert-manager/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/jetstack-experimental/cert-manager/pulls/131/commits"},"statuses":{"href":"https://api.github.com/repos/jetstack-experimental/cert-manager/statuses/3c62b96c0dc1199354c2f66f24a4150647321303"}},"author_association":"COLLABORATOR"}}
{"actor":{"display_login":"munnerz"}}